Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
An organization is reviewing a contract for a Software as a Service (SaaS) sales application with a 99.9% uptime service level agreement (SLA). Which of the following BEST describes ownership of availability risk?
Answer: D
During an acquisition, which of the following would provide the MOST useful input to the parent company's risk practitioner when developing risk scenarios for the post-acquisition phase?
Answer: C
Which of the following should a risk practitioner recommend be done prior to disposal of server hardware containing confidential data?
Answer: D
A vendor's planned maintenance schedule will cause a critical application to temporarily lose failover capabilities. Of the following, who should approve this proposed schedule?
Answer: A
An organization is measuring the effectiveness of its change management program to reduce the number of unplanned production changes. Which of the following would be the BEST metric to determine if the program is performing as expected?
Answer: B
An organization recently implemented a cybersecurity awareness program that includes anti-phishing exercises for all employees. What type of control is being utilized?
Answer: B
Which of the following operational risks ensures that the provision of a quality product is not overshadowed by the production costs of that product?
Answer: D
Profitability operational risks focus on the financial risks which encompass providing a quality product that is cost-effective in production. It ensures that the provision of a quality product is not overshadowed by the production costs of that product. Incorrect Answers: A: Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. Information security risks are the risks that are associated with the protection of these information and information systems. B: These risks do not ensure that the provision of a quality product is not overshadowed by the production costs of that product. C: Project activity risks are not associated with provision of a quality product or the production costs of that product.
A recently purchased IT application does not meet project requirements. Of the following, who is accountable for the potential impact?
Answer: D
The project sponsor is accountable for the potential impact of a recently purchased IT application not meeting project requirements because they are the person responsible for championing the project and making key decisions. The project sponsor ensures that the project aligns with the organization's goals and strategies, approves the project's scope and objectives, and provides the necessary resources to complete the project successfully.
Source: Adapted from community discussion — Broesweelies
Which of the following is the MOST effective approach for an organization to establish and promote a strong risk culture?
Answer: D
Which of the following is the MOST important responsibility of an IT risk committee charged with overseeing IT risk management?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 131. 1449 questions available.
Version 1.0.0. How we source questions